devops engineer for a Unified Automation Platform

EPAM develops enterprise software products, open-source solutions, and accelerators.

• Support the design and build-out of an internal developer platform using Backstage, including Software Catalog, Scaffolder, TechDocs, and Search;
• Build multi-tenancy structures with organizational hierarchy and detailed RBAC beyond basic authentication;
• Connect Azure DevOps (ADO) for CI/CD pipelines, announcements, and notifications;
• Create golden path templates and self-service workflows for development teams;
• Deliver Infrastructure as Code with Terraform/OpenTofu and Configuration as Code with Ansible;
• Set up GitOps workflows to manage continuous deployment and drift;
• Automate the provisioning and management of Azure services, including VNets, Application Gateway, WAF, Azure Firewall, NSGs, App Services, Container Apps, Function Apps, and databases;
• Direct Kubernetes (AKS) provisioning, cluster management, and operational dashboards;
• Develop and maintain image factory pipelines for VM and container golden images.

• Over 5 years of DevOps engineering experience, with strong Terraform/OpenTofu and Ansible skills;
• At least 1 year of leadership experience;
• Solid understanding of Azure networking and security services, including VNets, Application Gateway, WAF, Azure Firewall, NSGs, Subnets, and Route Tables;
• Hands-on experience with Azure compute services, including App Services, Container Apps, and Function Apps;
• Strong knowledge of Azure databases, including Azure SQL, Cosmos DB, and Azure Postgres;
• Deep expertise in Kubernetes/AKS provisioning, cluster management, operational dashboards, and Docker;
• Proven skills in Azure DevOps (ADO) pipeline automation and integration;
• English proficiency at B2 level or above;
• Nice to have: Backstage and self-service platform design, multi-tenancy/RBAC models, GitOps tools such as ArgoCD or Flux, Identity & Access Management, Entra ID, Active Directory, Group Policy Objects, M365 groups, Secrets Management tools, Azure Key Vault, OpenBao/HashiCorp Vault, dynamic secrets, Python, Bash, PowerShell, REST API integration, DNS automation, IPAM (NetBox), observability, VMware virtualization, Azure VMware Solution, Image Factory pipelines, Venafi, Policy as Code with OPA, Privileged Access Management, DevSecOps tooling, SIEM and WAF integrations, PaloAlto, F5, Cloudflare, ITSM/CMDB integration, artifact repositories, Vulnerability Management dashboards and reporting, Documentation Automation, Solution Design Documents (SDD).

• No conditions specified